{"id":9511,"date":"2017-09-26T04:30:02","date_gmt":"2017-09-26T12:30:02","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/09\/26\/news-3284\/"},"modified":"2017-09-26T04:30:02","modified_gmt":"2017-09-26T12:30:02","slug":"news-3284","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2017\/09\/26\/news-3284\/","title":{"rendered":"Microsoft Patch Alert: Where we stand with September\u2019s Windows and Office patches"},"content":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Tue, 26 Sep 2017 05:03:00 -0700<\/strong><\/p>\n

Microsoft\u2019s foray into quantum computing<\/a> sure sounds neat, but those of us stuck with real programs on real computers have been in something of a quandary. Once again this month, we\u2019ve hit a bunch of stumbling blocks, many of which were pushed down the Automatic Update chute<\/a>.<\/p>\n

Before we dissect the creepy-crawlies this month, it\u2019s important to remember that you have to get the .Net patches installed, unless you fastidiously refrain from clicking<\/a> the \u201cEnable Editing\u201d button in Word.<\/p>\n

After telling us<\/a> that Windows 10 Creators Update, version 1703<\/strong>, is \u201cthe most performant and reliable version of Windows 10 ever!\u201d you might expect some stability with version 1703 patches. This month, that didn\u2019t happen. After releasing cumulative update KB 4038788 on Patch Tuesday, we got a new out-of-band fix for bugs introduced by that same update. The new cumulative update, KB 4040724<\/a>, appeared in Windows Update on Monday, Sept. 25. It brings 1703 up to build 15063.632. So far, I haven\u2019t heard of any problems with the new cumulative update \u2014 but it\u2019s been less than a day.<\/p>\n

The situation with Win10 Anniversary Update, version 1607<\/strong>, isn\u2019t as straightforward. Apparently, there were a host of problems that appeared after this month\u2019s Patch Tuesday cumulative update, KB 4038782. It isn\u2019t clear if that update introduced bugs of its own, but the situation\u2019s bad enough that we got a second<\/em> cumulative update this month, again on Monday. KB 4038801<\/a> brings Win10 version 1607 to build 14393.1736. It\u2019s a hotfix; it isn\u2019t distributed via Automatic Update. You have to download KB 4038801<\/a> and install it manually. I haven\u2019t seen a detailed analysis of the security holes fixed by this odd Monday patch \u2013 but to date I haven\u2019t seen any complaints, either. The day is still young.<\/p>\n

For reasons as yet unexplained, KB 4038801 is only for Win10 1607; it\u2019s explicitly not released for Server 2016.<\/p>\n

There\u2019s a note on the 1607 patch site that says:<\/p>\n

Windows Update Client Improvement<\/em><\/p>\n

Microsoft will release an update directly to the Windows Update Client to improve Windows Update reliability. It will only be offered to devices that have not installed any recent cumulative updates and are not currently managed (e.g., domain joined).<\/em><\/p>\n

As noted by @abbodi86<\/a> on AskWoody.com:<\/p>\n

The note means [they] are going to release a separate \u201csmall\u201d update for WUC, similar to this one<\/a> for version 1507. They could also release the update directly as a SelfUpdate for WUC like they used to do with Windows prior [to] Windows 8 (for example, latest for Windows 7 is v7.6.7600.320 before they shifted to separate WUC updates starting with KB2990214).<\/p>\n

When you run the Get-PhysicalDisk cmdlet, some disks may display an operational status of “In Maintenance Mode.” The Get-VirtualDisk cmdlet may also display the operational status of the virtual disk as “Degraded.”<\/em> There\u2019s a manual workaround described in KB 4043361<\/a>.<\/p>\n

On Windows Server 2016, when you try to download updates by using Windows Update (stand-alone or WSUS), the process hangs at 0 percent completion.<\/em> Microsoft has a description of the problem and two manual overrides in KB 4039473<\/a>.<\/p>\n

Everyone\u2019s favorite whipping boy just took another lash. Many folks report that, after installing KB 4038792 \u2014 the September Monthly Rollup for Win 8.1 \u2014 they can no longer log on to their computers with a Microsoft account. I posted the details yesterday<\/a>. Still no word from Microsoft \u2013 not even an acknowledgment of the problem on the KB article<\/a>.<\/p>\n

There\u2019s a well-publicized problem<\/a> with Internet Explorer 11 suddenly sprouting a search box on the address bar after installing KB 4038777 (the Windows 7 Monthly Rollup) or KB 4036586 (the September Internet Explorer Security-only patch). For a detailed look at what\u2019s happening, with screenshots, see ElderN\u2019s post<\/a> on the Microsoft Answers forum. Turns out up the flim-flammery is a result of font sizes changed behind the scenes and a possible undocumented switcheroo in one of the IE settings. See @PKCano\u2019s post<\/a>.<\/p>\n

Poster Richard has also identified a problem with starting IE 11 after this month\u2019s Windows 7 updates \u2014 and he found a solution. Again, it\u2019s related to undocumented changes in the Tab View settings and in font size. See post 8 on the AskWoody Lounge<\/a>.<\/p>\n

I\u2019ve seen no change from the sorry state<\/a> we were in a week ago: Microsoft pulled the September Outlook 2007 security patch KB 4011086 and replaced it with KB 4011110, but you have to manually uninstall the bad patch before you install the new one. Microsoft posted incorrect information<\/a> about the uninstallation method. Both that patch and the Outlook 2010 patch, KB 4011089, have a nasty habit of changing languages in menus.<\/p>\n

The .NET Security and Quality Rollups make certain custom images turn black. As Microsoft puts it<\/a>: \u201cAfter you install the September 12, 2017, .NET Security and Quality Rollups that apply to the .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7, you experience rendering issues in Windows Presentation Foundation (WPF) applications that use WPF types in a Windows service.\u201d<\/p>\n

There\u2019s a description of the problem on the Visual Studio forum<\/a> and a workaround in KB 4043601<\/a>. The workaround suggests that you uninstall the Security and Quality Rollup and install the Security-only patch.<\/p>\n

In addition, Microsoft has released a preview<\/a> of next month\u2019s .Net Framework patches.<\/p>\n

Assuming you don\u2019t click \u201cEnable Editing\u201d in Word, there are no immediately pressing September patches. I say it\u2019s wise to wait and see if any of the outstanding bugs get fixed \u2014 and wait to see if the patches-of-patches generate new problems of their own.<\/p>\n

Remember when patching was easy?<\/p>\n

Please join us for an ongoing Patch Festschrift on the\u00a0AskWoody Lounge<\/a>.<\/i><\/p>\n

http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

<\/p>\n

Credit to Author: Woody Leonhard| Date: Tue, 26 Sep 2017 05:03:00 -0700<\/strong><\/p>\n

\n
\n

Microsoft\u2019s foray into quantum computing<\/a> sure sounds neat, but those of us stuck with real programs on real computers have been in something of a quandary. Once again this month, we\u2019ve hit a bunch of stumbling blocks, many of which were pushed down the Automatic Update chute<\/a>.<\/p>\n

Before we dissect the creepy-crawlies this month, it\u2019s important to remember that you have to get the .Net patches installed, unless you fastidiously refrain from clicking<\/a> the \u201cEnable Editing\u201d button in Word.<\/p>\n

To read this article in full or to leave a comment, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[714,10525],"class_list":["post-9511","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-security","tag-windows"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/9511","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=9511"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/9511\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=9511"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=9511"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=9511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}